Minimum roles/permissions required for DAP automation.

Question

We want to setup automation for replication of data from DAP to our internal SQL environment. A secret issued to an account admin was used for testing, but we want to scope to a user with only read permissions to data in Canvas and DAP and no other permission within canvas. I have reviewed the information here: https://community.canvaslms.com/t5/Canvas-Resource-Documents/Canvas-Account-Role-Permissions/ta-p/387078 but it doesn't seem to explicitly reference the DAP.

ColinMurtaugh · Accepted Answer

DAP and the Canvas API use different authentication systems. All DAP API keys are read-only, as all of DAP is read-only. A DAP key provides no access to the Canvas API.

All DAP keys provide the same access to DAP -- they're not based on the Canvas permissions of the user who generated them.

--Colin